{
    "AUTH_LDAP_SERVER_URI": "ldap://windc.{{ dns_domain_name }}:389",
    "AUTH_LDAP_BIND_DN": "Admin@{{ dns_domain_name }}",
    "AUTH_LDAP_BIND_PASSWORD": "{{ domain_admin_password }}",
    "AUTH_LDAP_START_TLS": false,
    "AUTH_LDAP_CONNECTION_OPTIONS": {
        "OPT_NETWORK_TIMEOUT": 30,
        "OPT_REFERRALS": 0
    },
    "AUTH_LDAP_USER_SEARCH": [
        [
            "{{ tower_ldap_search_dn }}",
            "SCOPE_SUBTREE",
            "(sAMAccountName=%(user)s)"
        ],
        [
            "{{ tower_ldap_search_dn }}",
            "SCOPE_SUBTREE",
            "(mail=%(user)s)"
        ]
    ],
    "AUTH_LDAP_USER_DN_TEMPLATE": null,
    "AUTH_LDAP_USER_ATTR_MAP": {
        "first_name": "givenName",
        "last_name": "sn",
        "email": "mail"
    },
    "AUTH_LDAP_GROUP_SEARCH": [
        "{{ tower_ldap_search_dn }}",
        "SCOPE_SUBTREE",
        "(objectClass=group)"
    ],
    "AUTH_LDAP_GROUP_TYPE": "MemberDNGroupType",
    "AUTH_LDAP_REQUIRE_GROUP": "",
    "AUTH_LDAP_DENY_GROUP": null,
    "AUTH_LDAP_USER_FLAGS_BY_GROUP": {
    },
    "AUTH_LDAP_ORGANIZATION_MAP": {
        "Default": {
            "admins": "CN=Ansible Users,CN=Users,{{ ldap_basedn }}",
            "remove_admins": true
        }
    },
    "AUTH_LDAP_TEAM_MAP": {
    }
}